A2a Auditor MCP Server

by 4hmetuyar Your server? Claim it

local only

A2a Auditor runs on your own machine — the client starts it, so there is no endpoint to ping. 39 installs a week from npm. Last commit 11 Oct 2026.

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Installs per day peak 231 · avg 13 · -83% w/w

a month agotoday

Installs / week

npm · @guardbee/mcp-a2a-auditor

Stars

0 open issues

11 Oct 2026

Last commit

2 releases in 90 days

—

License

TypeScript

Nothing serious here today

Today is the operative word: we check A2a Auditor every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add a2a-auditor -- npx -y @guardbee/mcp-a2a-auditor

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "a2a-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-a2a-auditor"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.a2a-auditor]
command = "npx"
args = ["-y", "@guardbee/mcp-a2a-auditor"]

.cursor/mcp.json

{
  "mcpServers": {
    "a2a-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-a2a-auditor"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "a2a-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-a2a-auditor"
      ],
      "command": "npx"
    }
  }
}

Alternatives to A2a Auditor

same job, measured the same way

Oauth Auditor

by guardbee

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

380 installs/wk local only

Oauth Auditor

by 4hmetuyar

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

local only

grim-mcp

by abduljabbarbxr

Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.

511 installs/wk local only

E2b

by mcparmory

Create and manage secure sandboxes for running AI agent code

261 installs/wk local only

QR for Agent

by benswel

Dynamic QR codes for AI agents — custom styling, scan tracking, webhooks

47 installs/wk local only

Valca

by pranlabs

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

189 installs/wk local only

Memory Poisoning Scanner

by 4hmetuyar

Scans agent code for untrusted input poisoning persistent cross-session memory

50 installs/wk local only

patchwork — Codebase Conventions for AI Agents

by sainarayana-b

Scan any codebase, generate CONVENTIONS.md, expose conventions as MCP tools for AI agents.

88 installs/wk local only

A2a Auditor — questions

Answers built from our own checks of this server.

Why is there no uptime for A2a Auditor?

A2a Auditor runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @guardbee/mcp-a2a-auditor was installed 39 times last week.

How do I connect A2a Auditor?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @guardbee/mcp-a2a-auditor straight from npm; nothing to host, nothing to sign up for.

How many people use A2a Auditor?

The npm package @guardbee/mcp-a2a-auditor was installed 39 times in the last week. Week over week that is -83%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is A2a Auditor open source?

We cannot say either way: written in TypeScript and 1 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.